Static task
static1
Behavioral task
behavioral1
Sample
058627ff12e913ba31f9397d774ee5b2_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
058627ff12e913ba31f9397d774ee5b2_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
058627ff12e913ba31f9397d774ee5b2_JaffaCakes118
-
Size
56KB
-
MD5
058627ff12e913ba31f9397d774ee5b2
-
SHA1
28f11ee16c58ddd988b91b5bf42933fa60deffc9
-
SHA256
3eb7e6a9e1717ae31f488c3428a052fdc2a900561e8b7a5a1de504e2839720b3
-
SHA512
983b870b8ddbcc7a17a35e217606e00412ae48abc1f2fdfa13b23902d6e0e29ae53e3b0025585d6a4100152380dcda234b89af7427feef2b5f028b349b421058
-
SSDEEP
768:h3p7ZaPpyr3ImT2DvmmOac2UMN2KAcCuLZMYfv+NzfNE0TZmzDkY0J2jxbYsdyFa:hvaL42VTFCuLZMNNiZfTxEDXFjDa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 058627ff12e913ba31f9397d774ee5b2_JaffaCakes118
Files
-
058627ff12e913ba31f9397d774ee5b2_JaffaCakes118.exe windows:4 windows x86 arch:x86
37f9a0e6735d3473d958d02078712353
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnumDateFormatsW
EnumTimeFormatsA
EnumDateFormatsExA
EnumUILanguagesA
RtlCaptureContext
GetLocaleInfoW
SetThreadUILanguage
InterlockedIncrement
FatalAppExitA
IsBadHugeReadPtr
SetConsoleMode
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE